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(54) Method and apparatus for altering sent electronic mail messages 



(57) Apparatus, methods, systems and computer 
program products are disclosed to provide electronic 



mail systems with the capability to actjpn previously- 
sent messages that have passed beyond the scope of 
control of the sending e-mail system. 
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Description 

This invention relates to the field of Electronic Mail 
Management Systems. Specifically, this invention is a 
new and useful method, apparatus, system and compu- 
ter program product for allowing the sender of an elec- 
tronic mail message to delete or modify the message 
after it has been sent. 

Electronic mail (e-mai!) provides a quick and con- 
venient way for computer users to communicate. This 
communication is initiated by a message sender com- 
posing a message using text (and optionally including 
other data) and addressing the message to a recipient 
at the same or different computer. 

To use e-mail, the message sender composes the 
message using a text editing program, provides the e- 
mail address of the intended recipient, and often pro- 
vides an indication of the content (subject matter) of the 
message by providing text in a "subject" field. Using 
well-understood technology this composed message is 
then sent to the recipient's computer address. The re- 
cipient's computer receives the message and stores it 
in the recipient's inbox. The recipient eventually reads, 
deletes, responds to, or otherwise processes the mes- 
sage stored within the inbox by using any of a number 
of e-mail programs well known in the art. Often messag- 
es are sent from one computer to another across the 
Internet. 

One characteristic of the I nternet is that once a mes- 
sage is submitted to the Internet, the Internet has the 
responsibility to deliver the message and the message 
becomes an independent entity — no longer under the 
scope of control of the program that submitted the mes- 
sage. Once the message is submitted to the Internet, it 
cannot be directly altered, canceled, or retracted by the 
originating program. 

Some e-mail systems provide a central repository 
for e-mail. Using this type of e-mail system the message 
sender composes the message and sends the message 
to the recipient The e-mail system saves the message 
in the e-mail repository until the recipient retrieves the 
message. In such a system, the sender can stop deliv- 
ery of the message if the recipient has not yet retrieved 
the message because the message remains within the 
scope of control of the originating e-mail system. This 
prior art situation is shown in Figure 1a Here a number 
of computer systems 161, 163, 165, 167, 169 are at- 
tached to a network 171. The e-mail server computer 
169 is attached to a filestorage device 173. This system, 
as so far described, is illustrative of a central mail repos- 
itory system. Additionally, it is useful to allow a central- 
ized mail repository system to send and receive mes- 
sages over the Internet. In the case illustrated in Figure 
1a, the computer serving as an Internet gateway 167 
provides access to the Internet 175 for the computers 
161, 163, 165, 169 that are connected to the network 
labeled as 171. Messages that enter the Internet 175 
leave the scope of control of the sending e-mail system. 



Thus, messages that flow to the Internet by way of gate- 
way 167 are outside the scope of control of ail the com- 
puters 161, 163, 165, 167, 169. Thus, messages sent 
to a computer 1 77 on the Internet 175 from a computer 
s 161, 163, 165, 167, 169 serviced by the central e-mail 
system 1 69 are no longer under the control of the e-mail 
system resident on the e-mail server computer 169. 
Thus, for example, a user on the computer labeled as 
161 who sends a message to a user of the computer 
10 labeled as 1 77 does not have the capability to cancel or 
modify a previously-sent message. In addition, the user 
on the computer labeled as 177 is unable to cancel or 
modify a message addressed to a user on the computer 
labeled as 165, In both cases the reason the user is un- 
15 able to affect the message is because the message has 
passed beyond the scope of control of the user's mail 
system, has taken on a life of its own and is not under 
the control of any program but is an entity traversing the 
Internet until it arrives at its destination. 

Another messaging schema is the Usenet Network 
News facility (netnews) that is well know to the art. Net- 
news has a "cancel" feature that allows the author of a 
message to send a follow-up cancel message that caus- 
es the recipient computers to remove the original mes- 
sage from their news directory. This netnews feature re-, 
lies on the standardized nature of netnews — all recip- 
ient computers are programmed to process cancel mes- 
sages. However, netnews messages cannot be modi- 
fied they can only be canceled. Further, netnews does 
not address the problem where some recipients have 
already read the message before it was canceled. Fi- 
nally, the netnews cancel facility allows someone other 
than the originator of the message to cancel messages 
they disagree with because there is no security process 
to validate who the originator of the previously-sent 
message. 

Because these messages travel across networks, 
they generally are constructed according to the Stand- 
ard for the Format of ARPA Internet Text Messages 
specification (RFC822). This specification can be found 
on the world wide web of the Internet at address 'http: 
//www.cis.ohio-state.edu/htbin/rfc/rfc822.html B and is 
included by reference. 

Messages formatted to the RFC822 standard have 
a header portion and an optional body portion that con- 
tains the text of the message. The header portion in- 
cludes a number of fields that address and classify the 
message. The invention does not require that the 
RFC822 standard be followed. So long as there is a way 
to identify certain information the invention will operate. 
This information comprises a list ol the message recip- 
ients, a subject field for a message and a unique mes- 
sage identifier. The embodiment described herein uses 
the RFC822 protocol. 

The header portion of a message contains fields 
composed of character strings comprising a field-name 
followed by a colon, followed by a field-body terminated 
by a carriage return/line feed. An example RFC822 
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header field is: 

'To: John Doe<CRxLF>". In this example, the 
<CR> represents the ASCII carriage return character 
and the <LF> represents the ASCII line feed character 
The header field-names are not case sensitive, thus, 
"to :" is equivalent to "TO:", "To:" or tO:\ 

The Invention uses the information contained in the: 
"Subject:", "To:", "Cc:", "Bcc:°, "Date:", and "Messsage- 
ID:" fields of a previously-sent message stored in the 
sending e-mail system. The contents of these fields are 
specified in RFC822. 

As mentioned above, the problem with prior art e- 
mail systems is that once a message passes beyond 
the scope of control of the originating e-mail system, it 
cannot be canceled or modified. Human nature being 
what it is, there have been many instances where the 
sender of a message would have liked to cancel that 
message without the intended recipient having seen the 
message. Examples of these mistakes extend from no- 
ticing a misspelling just after sending the message to an 
over enthusiastic response to perceived criticism. 

The invention addresses these problems and sim- 
plifies a recipient's use of e-mail by providing a mecha- 
nism for canceling or modifying a previously-sent e-mail 
message that has passed beyond the scope of control 
of the sender's e-mail system. 

The present invention overcomes the disadvantag- 
es of the above described systems and provides an eco- 
nomical apparatus, method, system and computer pro- 
gram product for providing enhanced facilities to users 
of electronic mail. One aspect of the invention is a com- 
puter controlled method for allowing an e-mail sender to 
alter a previously-sent electronic mail message ad- 
dressed to a recipient whose computer is beyond the 
scope of control of the sender's computer. The sender 
first selects which previously-sent message to alter. The 
invention then constructs an action message and sends 
the action message to the recipient's computer where it 
is received. 

In another aspect of the invention, an electronic mail 
system is disclosed providing a selection mechanism to 
allow a message sender to select a previously-sent 
message. Once a message is selected, a fabrication 
mechanism constructs an action message relating to 
the selected previously -sent message. A delivery mech- 
anism then sends the action message to the same e- 
mail system as the selected previously-sent message 
where the action message is received by a reception 
mechanism. 

In yet another aspect of the invention an apparatus 
for sending action messages is disclosed. This appara- 
tus includes a selection mechanism, a fabrication mech- 
anism and a delivery mechanism cooperating to select 
a previously-sent e-mail message, construct an action 
message for that previously-sent e-mail message and 
send the action message to a destination. 

Another aspect of the invention is a computer pro- 
gram product on a computer usable medium for causing 
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a computer to provide action messages to modify a pre- 
viously-sent message. 

One aspect of the invention is an apparatus for re- 
ceiving and processing action messages. This aspect 
includes a first reception mechanism to receive an ac- 
tion message. It also includes a second reception mech- 
anism to receive previously-sent messages. Finally, it 
includes an adjustment mechanism that applies the ac- 
tion message to the previously-sent message. 

Yet a further aspect of the invention is a computer 
program product on a computer usable medium for 
causing a computer to receive an action message and 
a previously-sent message and apply the action mes- 
sage to the previously-sent message. 

The objects, features and advantages of the system 
of the present invention will be apparent from the follow- 
ing description in which: 

Figure 1a illustrates the basic prior art con- 

cepts of an electronic mail communi- 
cation; 

Figure 1 b illustrates a typical computer system 

that supports an e-mail system; 

Figure 2 illustrates a basic prior art system 

components required for an originat- 
ing e-mail system to send a message 
to a recipient e-mail system via a net- 
work (the Internet); 

Figure 3 illustrates the prior art process for 

sending an e-mail message across a 
network; 

Figure 4 illustrates the process of modifying 

or canceling a previously-sent mes- 
sage in accordance with a preferred 
embodiment; 

Figure 5 illustrates the process for selecting 

and operating on a previously-sent 
message in accordance with a pre- 
ferred embodiment; 

Figures 6a-6d illustrate a graphical user interface 
for selecting a previously-sent mes- 
sage for cancellation or modification 
in accordance with a preferred em- 
bodiment; 

Figures 7a-7b illustrate the process for creating a 
cancel and modify message respec- 
tively in accordance with a preferred 
embodiment; 

Figures 8a-8c illustrate the data record formats for 
the message database, the cancel 
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database and the modify database in 
accordance with a preferred embod- 
iment; 

Figure 8d illustrates the process used to main- s 

tain the databases in accordance 
with a preferred embodiment; 

Figure 9 illustrates the process used by a re- 

ceiving e-mail system when receiv- 10 
ing a previously-sent message in ac- 
cordance with a preferred embodi- 
ment; 

Figure 10a illustrates the process used by a re- is 

ceiving e-mail system when receiv- 
ing a cancel message in accordance 
with a preferred embodiment; 

Figure 10b illustrates the process used by a re- 20 

ceiving e-mail system when receiv- 
ing a previously-sent message after 
having received a cancel message in 
accordance with a preferred embod- 
iment; 25 

Figure 11a illustrates the process used by a re- 

ceiving e-mail system when receiv- 
ing a modify message in accordance 
with a preferred embodiment; 30 

Figure 11b illustrates the process used by a re- 

ceiving e-mail system when receiv- 
ing a previously-sent message after 
having received modify message in 35 
accordance with a preferred embod- 
iment; and 

Figure 1 2 illustrates the process used to check 

for, and process the receipt of multi- 40 
pie action messages in accordance 
with a preferred embodiment. 

Notations and Nomenclauture 

45 

Cancel message — An e-mail message that is 
constructed to cause the recipient's e-mail system to de- 
lete a previously-sent message that the recipient has not 
seen, or notify the recipient of the sender's desire to can- 
cel the previously-sent message that the recipient has so 
seen. 

E-mail system — Electronic mail system. A system 
of computers generally connected by a network that al- 
low a sender (being a user of a first computer) to com- 
pose and send data making up a message to a recipient ss 
(being a user of either the first computer or of a second 
computer). 

Graphical User Interface (GUI) — A user interface 



that allows a user to interact with a computer display by 
pointing at selectable control areas on the display and 
activating a command or computer operation associat- 
ed with the selectable control area. GUIs are well known 
in the art. 

Modify message — An e-mail message that is 
constructed to cause the recipient's e-mail system to 
modify a previously-sent message that the recipient has 
not seen, or notify the recipient of the sender's desire to 
modify the previously-sent message that the recipient 
has seen. 

Original message — An e-mail message that the 
sender composed and sent to a recipient. For this dis- 
closure, once the original message leaves the scope of 
control of the sender's e-mail system the message is 
termed the previously-sent message. For the purposes 
of this application, the original message is the message 
that the sender desires to cancel or modify. 

Pointing device — A device that is responsive to 
a computer user's input that moves an indicator on a 
computer display screen. Such an indicator has an ac- 
tive point such that if the pointing device is activated (e. 
g., by a button push for a mouse device) a command 
associated with the selectable control area covered by 
the active point is evoked. Pointing devices are gener- 
ally used with graphical user interfaces. 

Previousry-sent message — An original message 
that is beyond the scope of control of the sender's e-mail 
system. Cancel and Modify messages operate on the 
Previously-sent message. 

Scope of control — A characteristic of an e-mail 
system While a message is within the scope of control 
of an e-mail system, that e-mail system can delete or 
otherwise affect the message. Once the message 
leaves the sending e-mail system's scope of control, the 
sending system can no longer directly affect the mes- 
sage. 

Selectable control area — An area on a computer 
display that is sensitive to activation of a pointing device. 
On activation of the pointing device over the selectable 
control area, a command or computer operation asso- 
ciated with the selectable control area is evoked. Most 
computer systems that provide a Graphical User Inter- 
face (GUI) also provide other methods for evoking these 
commands or computer operations such as keyboard 
function keys or command lines. " 

A procedure is a self -consistent sequence of steps 
leading to a desired result These steps are those requir- 
ing physical manipulation of physical quantities. Usually 
these quantities take the form of electrical or magnetic 
signals capable of being stored, transferred, combined, 
compared: and otherwise manipulated. These signals 
are referred to as bits, values, elements, symbols char- 
acters, terms, numbers, or the like. It will be understood 
by those skilled in the art that all of these and similar 
terms are associated with the appropriate physical 
quantities and are merely convenient labels applied to 
these quantities. 
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The manipulations performed by a computer in ex- 
ecuting opcodes are often referred to in terms, such as 
adding or comparing, that are commonly associated 
with mental operations performed by a human operator. 
No such capability of a human operator is necessary in 
any of the operations described herein that form part of 
the present invention; the operations are machine oper- 
ations. Useful machines for performing the operations 
of the invention include programmed general purpose 
digital computers or similar devices. In all cases the 
method of computation is distinguished from the method 
of operation in operating a computer. The present inven- 
tion relates to method steps for operating a computer in 
processing electrical or other (e.g., mechanical, chemi- 
cal) physical signals to generate other desired physical 
signals. 

The invention also relates to apparatus for perform- 
ing these operations. This apparatus may be specially 
constructed for the required purposes or it may com- 
prise a general purpose computer as selectively activat- 
ed or reconfigured by a computer program stored in the 
memory of a computer. The procedures presented here- 
in are not inherently related to a particular computer or 
other apparatus. In particular, various general purpose 
machines may be used with programs written in accord- 
ance with the teachings herein, or it may prove more 
convenient to construct more specialized apparatus to 
perform the required method steps. The required struc- 
ture for a variety of these machines will appear from the 
description below. 

Finally, the invention may be embodied in a compu- 
ter readable medium encoded with an electronic mail 
program. 

Description of the Preferred Embodiments 

Operating Environment 

Some of the elements o1 a computer system 102 
configured to support an e-mail application is shown in 
Figure 1 b wherein a processor 1 33 is shown, having an 
Input/Output ( B l/O p ) section 135, a central processing 
unit ("CPU") 137 and a memory section 139. The I/O 
section 1 35 is connected to a keyboard 1 41 , a disk stor- 
age unit 143, a network interface 145 to provide access 
to a network 117, a display unit 147, a pointing device 

148 and a CD-ROM drive unit 149. The CD-ROM unit 

1 49 can read a CD-ROM medium 151 that typically con- 
tains programs 1 53 and data. The CD-ROM 1 49 and the 
disk storage unit 143 comprising a filestorage mecha- 
nism. Such a computer system is capable of executing 
e-mail applications that embody the invention. 

Figure 2 illustrates how a plurality of computers : en- 
compassing the configuration described in Figure 1b, 
implement e-mail processing in the Internet environ- 
ment. A sender creates a message using an e-mail com- 
position facility 201 on the sender's computer 200. Once 
the e-mail message is created, it passes to an e-mail 



transmission facility 203. A copy of the e-mail is saved 
in the sender's outbox 204 in the sending e-mail system 
200. The e-mail transmission facility 203 encapsulates 
the e-mail within an Internet protocol and passes the en- 

5 capsulated e-mail to the Internet 205, as indicated by 
the arrow labeled as 213, where the message passes 
beyond the scope of control of the sender's e-mail sys- 
tem 200. The Internet 205 routes the e-mail to the re- 
cipient's computer 202, as indicated by the arrow la- 

10 beled as 211, where the message is received by the e- 
mail receiver facility 207. The e-mail receiver facility 207 
stores the message in the recipient's inbox 208. The re- 
cipient uses an e-mail processing facility 209 to read, 
respond to, delete or otherwise dispose of the e-mail 

15 message. One important characteristic of this configu- 
ration is that the sending e-mail system 200 relinquishes 
control over the message (the message leaves the 
scope of the sender's e-mail system) once it enters the 
Internet 205. Thus, once the message is beyond the 

20 scope of control of the sender's e-mail system, the mes- 
sage cannot be deleted or modified. This characteristic 
of the prior art is the root cause of the problem leading 
to the invention. 

Figure 3 illustrates the process of sending and re- 

2S ceiving messages used in the prior a/L_ The process 
starts at the terminal labeled as 301. First, the sender 
.composes a message 303 and when satisfied with the 
content, sends the message 305 to a destination. A copy 
of the message, including header information is stored 

30 in the sender's outbox. The message is submitted to a 
network 306 beyond the scope of control of the sender's 
e-mail system and is eventually received 307 at its des- 
tination by the recipient's computer. In the prior art, at 
the time the message leaves the scope of control of the 

35 sender's e-mail system the message can no longer be 
deleted or modified. The recipient's computer saves the 
message in the recipient's inbox 309. The recipient ac- 
cesses the message stored in the inbox 311 and dispos- 
es of the message 31 3 as desired and the process com- 

40 pletes through the terminal labeled as 315. 

As an additional complication, the Internet may at- 
tempt to route these messages over multiple paths. 
Some of these paths are faster than others. Hence, it is 
possible for a previously-sent, cancel or modify mes- 

45 sage to arrive at the recipients computer in a different 
sequence than they were sent. Further, multiple copies 
of these messages may arrive at the recipient's compu- 
ter. As described below, these Internet issues are ad- 
dressed by the invention. 

so 

Altering a Previously-sent Message 

Figure 4 illustrates the innovative process used by 
the invention to alter (modify or cancel) a previously- 
55 sent message that has passed beyond the scope of con- 
trol of the originating e-mail system. The process starts 
at the terminal labeled 401. As in the process illustrated 
by Figure 3, the sender sends an original message 403. 



55 



NSDOCID: <EP 08001 44A2J_> 



5 



9 



EP 0 800 144 A2 



10 



After the message has left the scope of control of the 
sending e-mail system, the sender decides 405 to mod- 
ify or cancel the previously-sent message (the original 
message created in step 403). The sender's e-mail pro- 
gram provides the sender 407 with options for the dis- 5 
position of the previously-sent message. Dependent on 
the sender's selections, the sender's e-mail program 
constructs an action message (a cancel or modify mes- 
sage) 409 targeted toward the previously-sent mes- 
sage, and sends this constructed action message to the 10 
same recipients as the previously-sent message. The 
recipient's e-mail system processes the action message 
411 and the process completes through the terminal 
block labeled as 413. 

Figure 5 illustrates the sender's process to alter a is 
previously-sent message. The process starts at the ter- 
minal labeled as 501. The sender's e-mail program pro- 
vides a mechanism (usually a database that consists of 
copies of messages that have been sent) that allows the 
sender to select a previously-sent message 503. The 20 
sender's e-mail program then provides the sender with 
the means to specify whether the selected previously- 
sent message is to be canceled, modified, or to leave 
the previously-sent message unchanged 505. The 
sender specifies the desired option 507 and the appli- 25 
cation continues depending on the option so specified. 
If the sender specified the cancel option, the e-mail pro- 
gram takes the cancel message option path 509 and the 
process completes through the terminal labeled as 515. 
If the sender selected the modify option, the e-mail pro- 30 
gram takes the modify message option path 51 1 and the 
process again completes through the terminal labeled 
as 515. Finally if the sender decided to neither cancel 
nor modify the message, the process takes the do noth- 
ing option 51 3 and the process again completes through 35 
the terminal labeled 515. 

Figure 6a illustrates how the sender selects which 
previously-sent message to alter according to a pre- 
ferred embodiment of the invention. The window 651 is 
presented to the sender. The window 651 includes se- 40 
lectable control areas 655, 657 and a message selection 
area 653 where information about previously-sent mes- 
sages is displayed. This information optionally includes 
the recipient of the message, the date message was 
sent, and an indication of the subject of the message. 45 
The close window selection area 657 allows the user to 
exit the message modification/cancel process and close 
the window 651 without performing any operation on a 
previously-sent message. The user can select a previ- 
ously-sent message to be modified or canceled by se- so 
lecting the message 659 and activating the function as- 
sociated with the Modify or Cancel Message control ar- 
ea 655. Either of the operations evoke a dialog to further 
specify the desired operation. There are many different 
possible organizations for the layout of this window 561 ss 
and the dialogs discussed below. The selectable control 
areas may have different labels, be placed at different 
locations, or even on different dialogs or windows and 



still be equivalent to the invention. The invention is di- 
rected toward the functions and capabilities of handling 
e-mail messages and of providing an e-mail message 
that causes some action at the recipients e-mail system 
and is not directed at the specific G Ul used in a particular 
disclosed embodiment. 

Figure 6b illustrates how the sender selects the 
cancel, modify or leave message unchanged functions 
according to a preferred embodiment. The dialog 601 is 
presented to the sender. The dialog 601 includes se- 
lectable control areas 603, 605, 607 and a text area 609 
where the text 611 of the selected previously-sent mes- 
sage 659 is displayed. In this embodiment, the sender 
selects what operation is desired on the selected previ- 
ously-sent message 659 displayed in the text area 609, 
by moving a pointing device over one of the selectable 
control areas 603, 605, 607 and activating the pointing 
device. In this manner, the user evokes the command 
associated with the selected selectable control area. 
The text area 609 only displays the text 611 of the pre- 
viously-sent message 659. The sender is not allowed to 
edit this text 611. However, the text 611 is displayed in 
a scrollable field 609 so the user can view the entire pre- 
viously-sent message 659. The scroll control 613 pro- 
vides the sender with the ability to scroti through the text - 
611 of the message 659 when the message 659 con- 
tains too much text 611 to fit within the text area 609 of 
the dialog 601. Other embodiments provide different 
mechanisms to present the selected previously-sent 
message and to select the disposition of the selected 
previously-sent message. When activated, the "Leave 
Message Unchanged" selectable control area 603 clos- 
es the dialog 601 without performing any operation on 
the selected previously-sent message 659 When acti- 
vated, the "Cancel This Message" selectable control ar- 
ea 605 evokes a display as illustrated in Figure 6c. 
When activated, the "Modify This Message" selectable 
control area 607 evokes a display as illustrated in Figure 
6d. 

Figure 6c illustrates a dialog 621 that is presented 
to the sender as a result of the sender selecting the 
"Cancel This Message" selectable control area 605. 
Like the display shown in Figure 6b, the text 631 of the 
selected previously-sent message 659 is displayed in 
an text area 629. Like the text area 609 of Figure 6b, the 
text area 629 in this dialog 621 can not be edited by the 
sender. However, the dialog also includes an explana- 
tory text area 637 that does allow the user to edit ex- 
planatory text it contains. In a preferred embodiment, 
the explanatory text area 637 is initialized to contain the 
explanatory text "Please DISREGARD my earlier e-mail 
message (repeated below): it should be canceled. 
Please accept my apologies." 635. Other initial messag- 
es could be used and still fall within the invention. The 
sendercan edit the explanatory text 635 in this area 637 
as desired. If the sender decides to not cancel the se- 
lected previously-sent message 659 the sender selects 
and activates the "Leave Message Unchanged" selecta- 
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ble control area 623 thus closing the dialog 621 without 
performing any operation on the selected previously- 
sent message 659. However, if the sender continues to 
desire to cancel the selected previously-sent message 
659, the sender activates the "Inform Recipient to Can- 
cel This Message" selectable control area 625 which ac- 
tivates the process illustrated in Figure 7a, described 
below. Upon selection of either selectable control area 
623, 625 the dialog 621 is removed from the display. 
Like the text area 609 of the dialog 601 described in Fig- 
ure 6b, the text area 629 contains a scroll control 633 to 
allow the user to view the entire text of the selected pre- 
viously-sent message 659. Additionally the explanatory 
text area 637 also contains a scroll control 639. 

Figure 6d illustrates a dialog 671 that is presented 
to the sender as a result of the sender selecting the 
"Modify This Message" selectable control area 607. Like 
the display shown in Figure 6b, the text 681 of the se- 
lected previously-sent message 659 is displayed in a 
text area 679. Unlike the text area 609 of Figure 6b, the 
text area 679 in this dialog 671 can be edited by the 
sender. The dialog 671 also includes an editable explan- 
atory text area 687 that contains explanatory text it. In 
a preferred embodiment, the explanatory text area 687 
is initialized to contain the explanatory text "Unfortu- 
nately, my earlier message was erroneous, so please 
use this new message instead:" 685. Those skilled in 
the art will understand that other initial messages are 
contemplated by the invention. The sender can edit this 
text in these areas 679, 687 to convey the desired mean- 
ing. In the illustration shown in Figure 6d the text 681 
has been heavily modified from that of the text 611 of 
the previously-sent message. If the sender decides to 
not modify the selected previously-sent message 659, 
the sender selects and activates the "Leave Message 
Unchanged" selectable control area 673. However, if the 
sender continues to desire to modify the selected pre- 
viously-sent message 659, the sender activates the 
"Modify This Message" selectable control area 677 
which activates the process illustrated in Figure 7b, de- 
scribed below. Upon selection of either selectable con- 
trol area 673, 677 the dialog 671 is removed from the 
display. Similar to the text area 609 of the dialog 601 
described in Figure 6b, this text area 679 contains a 
scroll control 683 to allow the user to view and edit the 
entire text of the selected previously-sent message 681 . 
Additionally, the explanatory text area 687 also contains 
a scroll control 689. 

Figure 7a illustrates the process initiated when a 
user cancels a selected previously-sent message 659. 
The process starts at the terminal block labeled 701 af- 
ter the sender has activated the "Inform Recipient to 
Cancel This Message" selectable control area 625. The 
process then generates the required headers for the 
cancel message 705 where appropriate using informa- 
tion from the selected previously-sent message. The 
headers that are directly copied from the selected pre- 
viously-sent message 659 include the To :, From:, Cc :, 



and Bcc : headers. The Date: field-body is set to the cur- 
rent date and time, and the Message-ID: field-body is 
set to a unique identifier value for the cancel message 
(this identifier is not the same as the identifier for the 
5 selected previously-sent message 659). The invention 
also uses the field-body data from the Subject: and Mes 
sage - ID : fields of the selected previously-sent mes- 
sage 659 as described below. One embodiment of the 
invention uses encryption to provide authentication pro- 
io tection to the previously-sent message. The headers re- 
quired to provide the authentication facility are also in- 
serted at this time. 

Next 707 the process generates a Subject: field for 
the cancel message based on the subject field of the 
is selected previously-sent message 659. The Subject : 
field for the cancel message starts with the text "CAN- 
CEL" followed by a space and then followed by the text 
contained in the subject field-body of the previously-sent 
message. Thus, the subject header of the cancel mes- 
20 sage for the selected previously-sent message 659 
shown in Figure 6a is: 

Subject: CANCEL You are now flamed 

25 Next~709 the process inserts a X-car»cel : header. 
The X-Cancel: field-body is set to the contents of the 
Message-ID: field-body of the selected previously-sent 
message 659 that is the target of the cancel operation. 
The Message-ID: field-body, as used in RFC822, con- 
st? tains a unique identifier that refers to a particular mes- 
sage. Thus, no two messages have the same message 
identifier. Hence, the X-Cancel: field-body contains the 
unique identification of the targeted previously-sent 
message 659. Those skilled in the art will understand 

35 that the invention encompasses the use of other user 
defined fields or RFC822 extensions that may be used 
to affect the invention. 

Next, 710, a blank line, to separate the RFC822 
header fields from the body of the message, and the text 

40 635 within the explanatory text area 637, as possibly 
modified by the sender, is inserted into the body of the 
cancel message. 

Now 711, the text of the selected previously -sent 
message 659 is included in the body of the cancel mes- 

45 sage. This is accomplished by inserting a line of sepa- 
ration text to indicate the start of the included message. 
An example line of separation text is: 

Text of the Original Message 

This line is followed by the text of the selected previous- 

50 |y-sent message 659. In a preferred embodiment the 
text includes the headers from the selected previously- 
sent message 659 that the recipient would have seen 
(for example, the Bcc: header would not be included in 
this text, nor would any route tracking headers). 

55 The cancel message is completed by including a 
line of separation text to indicate the end of the included 
message. An example line of separation text is: 

End of the Original Message 
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Finally 713, the cancel message is sent to the re- 
cipient using prior art methods in the same manner as 
the previously-sent message 659 was sent and the 
process completes through the terminal labeled as 715. 

Figure 7b illustrates the process initiated when a 
user modifies a selected previously-sent message 659. 
The process starts at the terminal block labeled as 751 
after the sender has activated the 'Modify This Mes- 
sage' selectable control area 677. The process then 
generates the required headers for the modify message 
755 where appropriate using information from the se- 
lected previously-sent message 659. The headers di- 
rectly copied from the selected previously-sent mes- 
sage 659 include the To:, From:, Cc:, and Bcc: fields. 
The Date: field-body is set to the current date and time, 
and the Message-ID: field-body is set to a unique mes- 
sage value for the modily message (this message value 
is not the same as the message value for the selected 
previously-sent message 659). The invention also uses 
the field-body data frdm the Subject: and Message-ID: 
fields of the selected previously-sent message 659 as 
described below. One embodiment of the invention uses 
encryption to provide authentication protection to the 
previously-sent message. The headers required to pro- 
vide the authentication facility are also inserted at this 
time. 

Next 757 the process generates a Subject : field for 
the modify message based on the subject field-body of 
the selected previously-sent message 659. The Sub- 
ject: field-body for the modify message starts with the 
text "MODIFY" followed by a space and then followed 
by the data of the subject field-body of the selected pre- 
viously-sent message 659. Thus, the subject header in 
the modify message for the selected previously-sent 
message 659 shown in Figure 6a is: 

Subject: MODIFY You are now flamed 

Next 759 the process inserts a X-Modify: header. 
The X-Modify: field-body is set to the contents of the 
Message-ID: field-body of the selected previously-sent 
message 659 that is the target of the modify operation. 
Thus, the X-Modify: field-body contains the unique iden- 
tification of the targeted previously-sent message 659. 
Those skilled in the art will understand that the invention 
encompasses the use of other user defined fields or 
RFC822 extensions that may be used to affect the in- 
vention. 

Next, 760, a blank line, to separate the RFC822 
header fields from the body of the message, and the text 
685 in the explanatory text area 687, as possibly modi- 
fied by the sender, is inserted into the body of the modify 
message. 

Now 761 the text of the selected previously-sent 
message 659, as modified by the user as described for 
Figure 6d, is inserted into the modify message body. 
This is accomplished by inserting a line of separation 
text to indicate the start of the included message. An 
example line of separation text is: 

Text of the Modified Message 



This line is followed by the modified text 681 based on 
the selected previously-sent message 659. In a pre- 
ferred embodiment the text includes the headers from 
the selected previously-sent message 659 that the re- 
5 cipient would have seen (for example, the Bcc: header 
would not be included in this text, nor would any route 
tracking headers). 

The modify message is completed by including a 
line of separation text to indicate the end of the modified 
10 message. An example line of separation text is: 

End of the Modified Message 

Finally 763, the modify message is sent to the re- 
cipient using prior art methods in the same manner as 
the previously-sent message 659 was sent and the 
is process completes through the terminal labeled as 765. 
The previous discussion has disclosed the inven- 
tion as it relates to the sending e-mail system. Action 
messages constructed according to the above de- 
scribed invention can be sent to a prior art e-mail sys- 
20 tern. In this case, the X-Cancel :, the X-Modify:, and the 
modified Subject: fields are all displayed to the recipient. 
This informs the recipient of the sender's intent, but goes 
no further and does not delete or modify the selected 
previously-sent message 659. Thus, while the invention 
25 as disclosed above is useful, it is further enhanced by. 
modifying the receiving e-mail system to specially proc- 
ess the modify and cancel messages. These enhance- 
ments are disclosed below starting with the databases 
used by a preferred embodiment. 

30 

Databases used with a Preferred Embodiment of the 
Invention 

As mentioned above, the sending e-mail system re- 
55 tains copies of the messages that have been sent in the 
sender's outbox. This information is stored using prior 
art techniques and is not further discussed. 

A receiving e-mail system utilizing the invention 
must track received messages. This tracking is imple- 
40 mented by maintaining three databases. Those skilled 
in the art will recognize that the number of databases is 
not important to the invention, rather the information 
contained in the records of the invention is of relevance. 
Thus, although the preferred embodiment, described 
45 below, uses three databases, the invention can be prac- 
ticed with one, two or in some instances more than three 
databases. 

Figure 8a illustrates the format of the records in the 
Message database. The message database tracks 

so which messages have been received and the location 
^ where the message is currently stored. As described 
above, messages are initially stored in the recipient's 
inbox. However, once the recipient has read the mes- 
sage the recipient may decide to either delete the mes- 

55 sage or store the message in some location other than 
the inbox. The receiving e-mail system creates a record 
800 for each previously-sent message that the receiving 
e-mail system receives and places in the recipient's in- 
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box. One field 801 of the record 800 stores the unique 
message number that was contained in the field-body 
of the Message-ID: header field for the previously-sent 
message. This albws the receiving e-mail system to un- 
ambiguously identify a previously-sent message. The 
location where the previously-sent message is stored is 
kept in the location field 803. if the message, identified 
by the value in the unique message number field 801, 
has been deleted, the location field 803 will be NIL. This 
situation will occur when handling duplicate cancel mes- 
sages. The last date field 807 contains the last date that 
the record was used. The last date field 807 is used to 
monitor how long the record has been inactive. In a pre- 
ferred embodiment, the record 800 is deleted if it has 
been inactive for more than a month. The process of 
deleting the record 800 is described below and illustrat- 
ed in Figure 8d. In another preferred embodiment the 
public key field 809 holds a pubic key value for RSA en- 
cryption purposes. 

Figure 8b illustrates the format of the records in the 
Cancel database. The cancel database tracks what 
previously-sent messages have been (or are to be) can- 
celed. Those skilled in the art will understand that the 
Internet may deliver a message containing the X-Can- 
cel: field to the recipient prior its delivery of the previ- 
ously-sent message even though the previously-sent 
message was submitted to the Internet before the can- 
cel message was submitted to the Internet Further, 
those skilled in the art will understand that the Internet 
may deliver duplicate copies of the previously-sent mes- 
sage (and duplicate copies of the cancel message). 
Thus, the cancel database is used to store information 
relating to the cancel function so that the invention can 
handle duplicates of the cancel message. Like the mes- 
sage record 800 the cancel record 820 includes a field 
that contains the unique message number 821 that con- 
tains the message identifier ot the previously-sent mes- 
sage that is to be canceled. The last date field 827 con- 
tains the last date that the record was used. The last 
date field 827 is used to monitor how long the record 
has been inactive. In a preferred embodiment, the 
record 820 is deleted if it has been inactive for more than 
a week. The process of deleting the record 820 is de- 
scribed below and illustrated in Figure 8d. The original 
date and time field 829 is used to store the date and time 
ot the construction (fabrication) of-the cancel message. 
This date and time value is provided in the field-body of 
the Dale: header of the cancel message. If for some rea- 
son the cancel message does not have a Date: header, 
the date and time when the cancel message was re- 
ceived is used. The original date and time field 829 is 
used to compensate for the case of receiving multiple 
copies of the cancel message. The message seen field 
823 is initially set FALSE, but is set TRUE if the recipient 
has viewed the previously-sent message before it was 
canceled. 

Figure 8c illustrates the format of the records in the 
Modify database. The modify data base tracks what 



previously-sent messages have been (or are to be) 
modified. Those skilled in the art will understand that the 
Internet may deliver a message containing the X-Modi- 
fy: field to the recipient prior to its delivery of the previ- 

5 ously-sent message even though the previously-sent 
message was submitted to the Internet before the mod- 
ify message was submitted to the Internet. Further, 
those skilled in the art will understand that the Internet 
may deliver duplicate copies of the previously-sent mes- 

10 sage (and duplicate copies of the modify message). 
Thus, the modify database is used to store information 
relating to the modify function so that the invention can 
handle duplicates of the modify message. Like the mes- 
sage record 800 the modify record 850 includes a field 

is that contains the unique message number 851 that is 
the message identifier of the previously-sent message 
that is to be modified. The number of modifications 
shown to user field 853 is used to keep track of the 
number of times the user has been notified of different 

20 modifications performed on the previously-sent mes- 
sage. The last date field 857 contains the last date that 
the record was used. This field 857 is used to monitor 
how long the record has been inactive. In a preferred 
embodiment, the record 850 is deleted if it has been in- 

25 active for'more than a week. The prpcesspf deleting the 
record 850 is described below and illustrated in Figure 
8d. The original date and time field 859 is used to store 
the date and time of the construction (fabrication) of the 
modify message. The date and time value is provided 

30 in the field-body of the Date: header of the modify mes- 
sage. It for some reason the modify message does not 
have a Date: header, the date and time when the mes- 
sage was received is used. The original date and time 
field 859 is used to compensate for the case of receiving 

35 multiple copies of the modification message. 

Finally, Figure 8d illustrates a periodic mainte- 
nance process for these databases. The result of this 
maintenance process is that unused records are deleted 
from the database thus pruning the database to help 

40 control its size. This process is invoked periodically dur- 
ing a period of low computer activity. A preferred em- 
bodiment invokes this process every day at 2:10 a.m. 
This process starts at the terminal labeled as 861 . Then 
863 each record 800, 820, 850 in these databases is 

45 examined 867 to determine if record 800, 820, 850 has 
not been updated for longer than some trip time. This 
determination is based on the current date and the date 
within the last date field 807, 827, 857 of the record 800, 
820, 850 being examined. If the record 800, 820, 850 

50 has been inactive for longer then the trip time, the record 
800, 820, 850 is deleted 865. This loop continues for all 
the records 800. 820, 850 in these databases and once 
the last record is examined the process exits through 
the terminal labeled as 869. 

55 Now that the databases used by the receiving e- 
mail system are described, we discuss additional as- 
pects of the invention within the receiving e-mail system. 
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Receiving a Previously-sent Message 

A receiving e-mail system utilizing the invention per- 
forms operations beyond those of the prior art when re- 
ceiving messages. Figure 9 illustrates how a previous- 
ly-sent message is altered by such an e-mail system. 
The process starts at the terminal labeled as 901 . Then 
the previously-sent message is received 903 and the 
cancel database is examined 905 to see if a record 820 
matches with the message identification of the instant 
previously-sent message. Often, a previously-sent mes- 
sage is received and the sender has not canceled, nor 
modified the previously-sent message. In this case, no 
matching record 820 will be found in the cancel data- 
base. Next, the modify database is examined 907 to see 
if a record 850 matches with the message identification 
of the instant message. Again, in this case no matching 
record 850 will be found. Thus, the receiving e-mail sys- 
tem only creates 909 a record 800 in the message da- 
tabase and stores the previously-sent message within 
the users inbox (or wherever the recipient's e-mail sys- 
tem stores incoming messages) 911. The unique mes- 
sage number field 801 of the record 800 is set to the 
information contained within the Message-ID: field-body 
of the previously-sent message. The location field 803 
is set to the location of where the previously-sent mes- 
sage is stored (e.g., the recipient's inbox). The last date 
field 807 is set to the current date. The process com- 
pletes through the terminal labeled as 913. If the previ- 
ously-sent message contains a public key header, as 
described below, the public key field-body contents are 
saved in the public key field 809. 

Now we examine the case where the sender has 
canceled a previously-sent message, and the cancella- 
tion action message has arrived at the receiving e-mail 
system prior to the receipt of the previously-sent mes- 
sage. In this case, the process again starts at the termi- 
nal labeled as 901 and the previously-sent message is 
received 903. Then the cancel database is examined 
905 to see if a record 820 matches with the message 
identification of the instant message. In this case a 
match will be found, cancel processing 915 performed 
and the process completes through the terminal labeled 
913. The details of the cancel processing 915 are de- 
scribed below. 

Finally we examine the case where the sender has 
modified a previously-sent message, and the modifica- 
tion action message has arrived at the receiving e-mail 
system prior to the receipt of the previously-sent mes- 
sage. In this case, the process again starts at the termi- 
nal labeled 901 and the previously-sent message is re- 
ceived 903. Then the cancel database is examined 905 
to see if record 820 matches with the message identifi- 
cation of the instant message. In this case no match will 
be found. Next, the modify database is examined 907 
to see if a record 850 matches with the message iden- 
tification of the instant message. In this case a match 
will be found, modify processing 917 performed and the 



process completes through the terminal labeled 913. 
The details of modify processing 917 are described be- 
low. 

s Cancel Processing 

Figures 10a and 10b illustrate how a cancel mes- 
sage is processed. There are two aspects of cancel 
processing. The first aspect is the processing of a re- 
10 ceived cancel message. The second aspect is the 
processing involved when receiving a previously-sent 
message after receipt of the corresponding cancel mes- 
sage. 

Figure 10a illustrates how a receiving e-mail sys- 
15 tern processes the receipt of a cancel message. 
Processing starts at the terminal labeled as 1001 when 
the receiving e-mail system receives 1003 a message 
containing an X-Cancel: header field. The receiving e- 
mail system first performs checks on the databases 
1004. These database checks are described below. If 
the database check determines that nothing further is to 
be done with the cancel message, processing com- 
pletes through the terminal labeled as 1009 as indicated 
by the arrow labeled as 1005. If the database check al- 
lows further processing the value of the -X-Cancel : field-, 
body is extracted from the cancel message and used to 
determine whether the message database contains an 
entry for the previously-sent message subject to the 
cancellation 1006. The fact that the message database 
contains such an entry implies that the previously-sent 
message subject to cancellation has arrived at the re- 
ceiving e-mail system prior to the arrival of the cancel 
message. If the message database does not contain a 
matching entry the information in the cancel message 
is stored in the cancel database 1007 and the process 
completes through the terminal labeled 1009. Inthis cir- 
cumstance, the previously-sent message has not yet ar- 
rived. 

However, if the previously -sent message subject to 
the cancellation has already been received by the re- 
ceiving e-mail system prior to the receipt of the cancel 
message, the X-Cancel: field-body value will find a 
match in the message database 1006. Once the previ- 
ously-sent message is received by the receiving e-mail 
system, it is stored in the recipient's inbox. The recipient 
may, for a number of reasons, not examine the message 
for some time. The inbox maintains information as to 
whether the recipient has seen the message. Process- 
ing continues dependent on whether the recipient has 
seen the message 1011 . If the recipient has not yet seen 
the message, the previously-sent message is deleted 
from the inbox 1017 and the location field 803 field in 
the record 800 corresponding to the message in the 
message database is cleared 1019. Next 1021 the re- 
cipient's e-mail system returns a confirmation message 
to the sender of the previously-sent and cancel messag- 
es indicating that the message has been canceled and 
has not been seen by the recipient Finally the process 
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completes through the terminal block labeled as 1009. 

If the previousfy-sent message has been seen by 
the recipient 1011 (as described below for Figure 11a), 
the receiving e-mail system informs the recipient that the 
message was canceled 1013. The recipient is given a 
number of choices as what to do with the previously- 
sent message 1015. These options include but are not 
limited to deleting the original message or treating the 
cancel message as a normal message. If the recipient 
decides to delete the original message, the recipient's 
e-mail program uses the location field 803 in the mes- 
sage database record 800 to find and delete the mes- 
sage and to clear the location field 803. Further, the 
message seen field 823 of the associated cancel record 
820 is set to TRUE. Next 1022 the recipients e-mail sys- 
tem returns a confirmation message to the sender of the 
previously-sent and cancel messages indicating that the 
message has been canceled but that the recipient has 
seen the canceled message prior to cancellation. Final- 
ly, the process completes through the terminal labeled 
as 1009. 

Figure 10b details the cancel message processing 
mentioned above relating to element 915 of Figure 9. To 
review, a previously-sent message has arrived at the re- 
ceiving e-mail system and there exists an entry in the 
cancel database having a unique message number 851 
that matches the Mes sage - ID : field-body of the just 
received previously-sent message. The intended recip- 
ient of the previously-sent message has not yet seen 
the previously-sent message. Processing starts at the 
terminal labeled as 1051. Next, the receiving e-mail sys- 
tem removes the just received previously-sent message 
from the system 1053 without storing the previously- 
sent message. Then 1055, the last date field 827 in the 
relevant canceled database record 820 is set to the cur- 
rent date. Finally, the receiving e-mail system sends 
1057 the originator a confirmation message indicating 
that the previously-sent message was canceled without 
being seen by the recipient. The process completes 
through the terminal labeled as 1059. 

A final note about the cancel database. In a pre- 
ferred embodiment, a record 820 with a last date field 
827 older than seven days is deleted by the process il- 
lustrated by Figure 8d. Again, those skilled in the art will 
recognize that the seven day record aging can be con- 
siderably longer or shorter and still practice the inven- 
tion. 

Modify Processing 

Figures 11a and 11b illustrate how a modify mes- 
sage is processed. There are two aspects of modify 
processing. The first aspect is the processing of a re- 
ceived modify message. The second aspect is the 
processing involved when receiving a previously-sent 
message. 

Figure 11a illustrates how a receiving e-mail sys- 
tem processes the receipt of a modify message. The 



processing starts at the terminal labeled as 1101 when 
the receiving e-mail system receives 1103 a message 
containing an X-Modify: header field. The receiving e- 
mail system first performs checks on the databases 
s 1104. These database checks are described below. If 
the database check determines that nothing further is to 
be done with the modify message, processing com- 
pletes through the terminal labeled as 1 115 as indicated 
by the arrow labeled as 1106. If the database check al- 
io lows further processing the value of the X-Modify : field- 
body is extracted from the modify message and used to 
determine whether the message database contains an 
entry for the previously-sent message that is being mod- 
ified 1105. If the message database contains such an 
is entry it means that the previously-sent message being 
modified has arrived at the receiving e-mail system prior 
to the arrival of the modify message. If the message da- 
tabase does not contain a matching entry (meaning that 
the previously-sent message has not yet arrived) the in- 
formation in the modify message is stored in the modify 
database 1107 and the content of the modify message 
stored in the recipient's inbox 1109. Next, the receiving 
e-mail system sends a confumation 1111 to the sender 
of the previously-sent message confirming that the mod- 
ification has been made-and that the recipient has not 
seen the previously-sent message. The process com- 
pletes through the terminal labeled 1115. 

However, if the previously-sent message had al- 
ready been received by the receiving e-mail system pri- 
or to the receipt of the modify message, the X-Modify : 
field-body value will find a match in the message data- 
base 1105. Once the previously-sent message is re- 
ceived by the receiving e-mail system, it is stored in the 
recipient's inbox. The recipient may for a number of rea- 
sons, not examine the message for some time. The in- 
box maintains information as to whether the recipient 
has seen the message. Processing continues depend- 
ent on whether the recipient has seen the message 
1117. If the recipient has not yet seen the message the 
previously-sent message is deleted from the inbox 1 1 08 
and the modified text of the previously-sent message 
contained within the modify message is saved in the re- 
cipient's inbox. Next 1111 the recipients e-mail system 
returns a confirmation message to the sender of the pre- 
viously-sent and modify messages indicating that the 
previously-sent message has been modified and the re- 
cipient has not seen it. Finally the process completes 
through the terminal block labeled as 1115. 

If the previously-sent message has been seen by 
the recipient 1117, the number of modifications shown 
field 853 in the modified database record 850 is in- 
creased by one 1118 and the receiving e-mail system 
informs the recipient that the message was modified 
1119. If the value in the number of modifications shown 
field 853 is greater than one, indicating that the user has 
seen prior modifications of the previously-sent mes- 
sage, the recipient is informed that the present modifi- 
cation is a new and different modification than the prior 
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modifications and displays the number of modifications 
the recipient has seen (that is, the value of the modifi- 
cations shown field 853). The recipient is given a 
number of choices as what to do with the previously- 
sent message 1121. These options include but are not 
limited to deleting the original message or treating the 
modify message as a normal message. If the recipient 
decides to delete the original message, the recipient's 
e-mail program uses the location field 803 in the mes- 
sage database record 800 to find and delete the mes- 
sage. Next 1112 the recipients e-mail system returns a 
confirmation message to the sender of the previously- 
sent and modify messages indicating that the message 
has been modified and the recipient has seen the pre- 
viously-sent message before it was modified. Finally, 
the process completes through the terminal labeled as 
1115 

To determine whether the previously-sent message 
has been seen by the recipient 1011, 1117, the process 
first checks whether the previously-sent message is 
available by checking the location field 803 of the record 
800 associated with the message. If the message is 
available then check if the previously-sent message has 
been seen by the recipient by examining the recipient's 
inbox. If the previously-sent message still exists in the 
recipient's inbox, the status of the message provides the 
result whether the recipient has seen the message. Fur- 
ther, if the location field 803 is not the inbox, the recipient 
has seen the message. 

If the inbox does not contain the message and if the 
previously-sent message is not available (e.g., the loca- 
tion field 803 contains NIL), then check the cancel da- 
tabase for a record 820 having the same unique mes- 
sage number 821 as the value in the X-Modify: field- 
body of the modify message. If such a record 820 exists, 
then check the message seen before cancel field 823. 
If the value of this field 823 is TRUE, the message has 
been seen and if FALSE the message has not been 
seen. Otherwise, the recipient has seen the previously- 
sent message and has deleted it. 

Figure 11b details the modify message processing 
mentioned above relating to element 917 of Figure 9. To 
review, a previously-sent message has just arrived at 
the recipient's e-mail system and there is an entry in the 
modily database that matches the Message-ID of the 
just arrived previously-sent message. The intended re- 
cipient of the previously-sent message has not yet seen 
the message. Processing starts at the terminal labeled 
1151 Next, the receiving e-mail system removes the 
just received previously-sent message from the system 
1153 without having stored the message in anyone's in- 
box. Then 1155 the last date field 857 in the relevant 
modified database record 850 is updated. Finally, the 
process completes through the terminal labeled as 
1159 

A final note about the modified database. In a pre- 
ferred embodiment, a record 820 with a last date field 
857 older than seven days is deleted by the process il- 



lustrated by Figure 8d. Again, those skilled in the art will 
recognize that the seven day record aging can be con- 
siderably longer or shorter and still practice the inven- 
tion. 

5 

Database Checks 

Figure 12 illustrates the database checks invoked 
at the processing blocks labeled as 1004 and 1104 in 
io Figure 1 0 and Figure 1 1 respectively. These checks help 
synchronize the multiple actions messages that the 
sender may send. These multiple actions include send- 
ing multiple cancel messages, multiple modify messag- 
es or some combination of both. The check process 
75 starts at the terminal labeled as 1 201 . The first test is to 
determine whether the action message being proc- 
essed is a cancel or modify message 1203. For embod- 
iments incorporating the authentication check described 
below this test 1203 also determines the validity of the 
action request as applied to the targeted previously-sent 
message. If the encryption check fails the do nothing 
exit 1 21 3 is taken as shown by the dashed arrow labeled 
as 1204. Thus no other operation is performed on the 
action message as indicated by the arrows labeled as 
1005 and 1106 in Figures 10 andt11 respectively. 

If the action message is a cancel message the next 
test 1205 is whether there is a newer record 820, 850 
(based on the original date and time field 829, 859) in 
either the cancel or modify databases that is targeted 
toward the same previously-sent message. If such a 
record 820, 850 exists the do nothing exit 1213 is taken. 
Thus no other operation is performed on the action mes- 
sage as indicated by the arrows labeled as 1005 and 
1106 in Figures 10 and 11 respectively. If such a record 
820, 850 does not exist the next test 1207 checks wheth- 
er an older record 820 exists in the cancel database. If 
no such record exists, the process completes through 
the terminal labeled as 1219 and processing of the can- 
cel message continues normally. If an older record 820 
exists in the cancel database, the original date and time 
field 829 is updated with the date and time information 
from the instant cancel message. Further the current 
date is saved into the last date field 827 of the record 
820. Again, the process completes through the do noth- 
ing terminal 1213. 

If the action message is a modify message, the 
process checks 1215 again for whether a newer record 
820, 850 exists in either the cancel or modify databases 
that is targeted toward the same previously-sent mes- 
sage. If such a record 820, 850 does not exist the proc- 
ess completes normally through the terminal labeled 
1219. If a newer action record does exist, the last date 
field 857 of the modify record 850 is updated 1217 and 
the process completes through the do nothing terminal 
labeled 1213. 
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A uthen ti cat ion 

In one preferred embodiment of the invention the 
previously-sent message is protected from unauthor- 
ized cancellation or modification by using a public key 
encryption method (RSA is preferred) to assure that only 
the sender of the previously-sent message is able to al- 
ter the message. In this embodiment of the invention, 
an additional header field is added to the original mes- 
sage. That field is the X-Public-Key: field. The field-body 
contains the sender's public key. All action messages 
(the cancel and modify messages) include a X-Signed- 
ID: header. This field-body for this header contains the 
original message's unique message identifier that has 
been encrypted by the sender's private key. When the 
previously-sent message is received by the recipient's 
e-mail system, the public key information from the X- 
Public-Key: field is stored in the message database 
record 800 in the public key field 809. 

When an action message is received by the recipi- 
ent's e-mail system the encrypted message-ID (con- 
tained in the field-body of the X-Signed-ID: header) is 
decrypted using the value in the public key field 809 and 
compared with the value contained in the unique mes- 
sage number field 801. If the values are the same, the 
original sender of the previously-sent message also 
sent the action message. This decryption and check can 
be accomplished in many different areas of the receiving 
e-mail system. A preferred embodiment includes this 
check in the check message type test 1203 portion of 
the database check process as illustrated in Figure 12 
and described above. 

One skilled in the art will understand that the inven- 
tion as described above teaches a computerized e-mail 
system that provides additional functionality to the user 
of the e-mail system by allowing the author of a message 
to delete or modify previously-sent messages that have 
been sent beyond the scope of control off the sender's 
e-mail system. 

Further, one skilled in the art will understand that 
various modifications and alterations may be made in 
the preferred embodiment disclosed herein without de- 
parting from the scope of the invention. Accordingly, the 
scope of the invention is not to be limited to the particular 
invention embodiments discussed above, but should be 
defined only by the claims set forth below and equiva- 
lents thereof. 

The processes described above may be performed 
by a computer program running on a computer in the 
embodiment described. Such a computer program can 
be recorded on a recording medium (for example a mag- 
netic disc or tape : an optical disc or an electronic mem- 
ory device, such as a ROM) in a way well known to those 
skilled in the art. When the recording medium is read by 
a suitable reading device, such as a magnetic or optical 
disc drive, a signal is produced which causes a compu- 
ter to perform the processes described. 

The processes may also be performed by electronic 



means. 



Claims 

5 

1. A computer controlled method for altering a previ- 
ously-sent electronic mail (e-mail) message; said 
previously-sent e-mail message sent by an originat- 
ing e-mail system to a receiving e-mail system; said 

10 originating e-mail system having a scope of control 
where said receiving e-mail system is beyond said 
scope of control; said originating e-mail system 
maintaining information regarding said previously- 
sent e-mail message; said method comprising the 

is steps of: 

selecting said previously-sent e-mail message 
by using said information; 
constructing an action message using said in- 
20 formation; 

sending said action message to said receiving 
e-mail system; and 

receiving said action message by said receiv- 
ing e-mail system. 

2. The computer controlled method of claim 1 further 
comprising a step of viewing said action message 
by a recipient. 

30 3. The computer controlled method of claim 1 further 
comprising the steps of: receiving said previously- 
sent e-mail message; and 

altering said previously-sent e-mail message as de- 
tected by said action message. 

35 

4. The computer controlled method of claim 3 wherein 
said action message is a cancel message and 
wherein said step of altering further comprises the 
step of deleting said previously-sent e-mail mes- 

40 sage. 

5. The computer controlled method of claim 4 wherein 
said previously-sent e-mail message further com- 
prises a public key and a unique message identifier; 

45 and wherein said cancel message further compris- 
es an encrypted unique message identifier formed 
from a private key and said unique message iden- 
tifier; and wherein said step of altering further com- 
prises the step of authenticating said cancel mes- 

50 sage. 

6. The computer controlled method of claim 3 wherein 
said step of altering further comprises the step of 
sending a confirmation message to said originating 

55 e-mail system. 

7. The computer controlled method of claim 3 wherein 
said action message is a modify message and 
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wherein said step for altering further comprises the 
step of modifying said previously-sent e-mail mes- 
sage; 

8. The computer controlled method of claim 7 wherein 
said previously-sent e-mail message further com- 
prises a public key and a unique message identifier; 
and wherein said modify message further compris- 
es an encrypted unique message identifier formed 
from a private key and said unique message iden- 
tifier, and wherein said step of altering further com- 
prises the step of authenticating said modify mes- 
sage. 

9. The computer controlled method of claim 1 further 
comprising the step of handling duplicates of said 
action message. 

10. The computer controlled method of claim 1 further 
comprising the step of synchronizing actions of a 
plurality of action messages on said previously-sent 
e-mail message. 

11. An electronic mail (e-mail) system having an origi- 
nating e-mail system, a receiving e-mail system and 
a network; each of said originating system and said 
receiving system having a central processing unit 
(CPU), a memory coupled to said CPU, a network 
interface for connecting to said network, a display, 
and a filestorage; said originating e-mail system 
having a scope of control where said receiving e- 
mail system is beyond said scope of control; said 
originating e-mail system maintaining information 
regarding a previously-sent e-mail message; said 
e-mail system comprising; 

a selection mechanism configured to select 
said previously-sent e-mail message by using 
said information; 

a fabrication mechanism configured to con- 
struct an action message using said informa- 
tion; 

a delivery mechanism configured to send said 
action message to said receiving e-mail sys- 
tem; and 

a first reception mechanism configured to re- 
ceive said action message by said receiving e- 
mail system. 

12. The e-mail system of claim 11 further comprising a 
message display mechanism configured to view 
said action message by a recipient. 

13. The e-mail system of claim 11 further comprising: 

a second reception mechanism configured to 
receive said previously-sent e-mail message; 
and 
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an adjustment mechanism configured to alter 
said previously-sent e-mail message as direct- 
ed by said action message. 

14. An apparatus for applying an action message to a 
previously-sent e-mail message; said apparatus 
having a central processing unit (CPU), a memory 
coupled to said CPU, a network interface for con- 
necting to a network, a display, and a filestorage; 
said apparatus receiving said action message from 
an originating e-mail system having a scope of con- 
trol where said apparatus is beyond said scope of 
control; said apparatus comprising: 

a first reception mechanism configured to re- 
ceive said action message; 
a second reception mechanism configured to 
receive said previously-sent e-mail message; 
and 

an adjustment mechanism configured to alter 
said previously-sent e-mail message as direct- 
ed by said action message. 

15. The e-mail system of claim 13 or the apparatus of 
claim 14, wherein said action message is a cancel 
message and wherein said adjustment mechanism 
further comprises a deletion mechanism configured 
to delete said previously-sent e-mail message. 

16. The apparatus or e-mail of claim 15 wherein said 
previously-sent e-mail message further comprises 
a public key and a unique message identifier; and 
wherein said cancel message further comprises an 
encrypted unique message identifier formed from a 
private key and said unique message identifier; and 
wherein said adjustment mechanism further com- 
prises an authentication mechanism configured to 
authenticate said cancel message. 

17. The e-mail system of claim 13 or the apparatus of 
claim 14 wherein said adjustment mechanism fur- 
ther comprise a confirmation mechanism config- 
ured to send a confirmation message to said origi- 
nating e-mail system. 

18. The e-mail system of claim 13 or the apparatus of 
claim 14 wherein said action message is a modify 
message and wherein said adjustment mechanism 
further comprises a modification mechanism con- 
figured to modify said previously -sent e-mail mes- 



19. The apparatus or e-mail system of claim 18 wherein 
said previously-sent e-mail message further com- 
prises a public key and a unique message identifier, 
and wherein said modify message further compris- 
es an encrypted unique message identifier formed 
from a private key and said unique message iden- 
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tifier; and wherein said adjustment mechanism fur- 
ther comprises an authentication mechanism con- 
figured to authenticate said modify message. 

20. The e-mail system of claim 11 or the apparatus of s 
claim 14 further comprising a duplicate message 
mechanism configured to handle duplicates of said 
action message. 

21. The e-mail system of claim 11 further comprising a 10 
message synchronization mechanism configured to 
synchronize actions of a plurality of action messag- 
es on said previously-sent e-mail message. 

22. The apparatus of claim 14 further comprising a 75 
message synchronization mechanism configured to 
synchronize actions of a plurality of action messag- 
es. 

23. An apparatus for sending an action message; said 20 
apparatus having a central processing unit (CPU), 

a memory coupled to said CPU, a network interface 
for connecting to a network, a display, and a filestor- 
age; said apparatus having a scope of control 
where a destination is beyond said scope of control; 25 
said apparatus maintaining information regarding a 
previously-sent e-mail message; said apparatus 
comprising: 

a selection mechanism configured to select 30 
said previously-sent e-mail message by using 
said information; 

a fabrication mechanism configured to con- 
struct an action message using said informa- 
tion; and 35 
a delivery mechanism configured to send said 
action message to said destination. 

24. An computer program product comprising: 

40 

a computer usable medium having computer 
readable code embodied therein for causing a 
computer to send an action message to alter a 
previously-sent e-mail message; said action 
message and said previously-sent e-mail mes- 4 & 
sage sent to a destination; said computer pro- 
gram product comprising: 
computer readable code devices configured to 
cause said computer to effect a selection mech- 
anism configured to select said previously-sent so 
e-mail message; 

computer readable code devices configured to 
cause said computer to effect a fabrication 
mechanism configured to construct said action 
message; and 55 
computer readable code devices configured to 
cause said computer to effect a delivery mech- 
anism configured to send said action message 
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to said destination. 

25. A signal for causing a computer to send an action 
message to alter a previously-sent e-mail message; 
said action message and said previously-sent e- 
mail message sent to a destination; the signal caus- 
ing the computer to implement 

computer readable code devices configured to 
cause said computer to effect a selection mech- 
anism configured to select said previously-sent 
e-mail message; 

computer readable code devices configured to 
cause said computer to effect a fabrication 
mechanism configured to construct said action 
message; and computer readable code devic- 
es configured to cause said computer to effect 
a delivery mechanism configured to send said 
action message to said destination. 

26. A method of storing data on a recording medium, 
the data representative of a signal, which signal 
causes a computer to send an action message to 
alter a previously-sent e-mail message; said action 
message and said previously-sent edriail message 
sent to a destination; the signal causing the compu- 
ter to implement: 

Computer readable code devices configured to 
ca use sa id computer to effect a selection mech- 
anism configured to select said previously-sent 
e-mail message; 

computer readable code devices configured to 
cause said computer to effect a fabrication 
mechanism configured to construct said action 
message; and computer readable code devic- 
es configured to cause said computer to effect 
a delivery mechanism configured to send said 
action message to said destination. 

27. The apparatus of claim 23, the computer program 
product of claim 24, the signal of claim 25 or the 
method of claim 26 wherein said message is a can- 
cel message. 

28. The apparatus, computer program product, signal 
or method of claim 27 wherein said previously -sent 
e-mail message further comprises a public key and 
a unique message identifier; and wherein said can- 
cel message further comprises an encrypted unique 
message identifier formed from a private key and 
said unique message identifier. 

29. The apparatus of claim 23, the computer program 
product of claim 24, the signal of claim 25 or the 
method of claim 26 wherein said action message is 
a modify message. 
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30. The apparatus, computer program product, signal 
or method of claim 29 wherein said previously-sent 
e-mail message further comprises a public key and 
a unique message identifier, and wherein said mod- 
ify message further comprises an encrypted unique 
message identifier formed from a private key and 
said unique message identifier. 

31. An computer program product comprising: 

a computer usable medium having computer 
readable code embodied therein for causing a 
computer to apply an action message to alter a 
previously-sent e-mail message; said compu- 
ter program product comprising: 
computer readable code devices configured to 
cause said computer to effect a first reception 
mechanism configured to receive said action 
message; 

computer readable code devices configured to 
cause said computer to effect a second recep- 
tion mechanism configured to receive said pre- 
viously-sent e-mail message; and 
computer readable code devices configured to 
cause said computer to effect an adjustment 
mechanism configured to alter said previously- 
sent e-mail message as directed by said action 
message. 

32. A signal for causing a computer to apply an action 
message to alter a previously-sent e-mail message; 
the signal causing the computer to implement: 

computer readable code devices configured to 
cause said computer to effect a first reception 
mechanism configured to receive said action 
message; 

computer readable code devices configured to 
cause said computer to effect a second recep- 
tion mechanism configured to receive said pre- 
viously-sent e-mail message; and 
computer readable code devices configured to 
cause said computer to effect an adjustment 
mechanism configured to alter said previously- 
sent e-mail message as directed by said action 
message. 

33. A method of storing data on a recording medium, 
the data representative of a signal, which signal 
causes a computer to apply an action message to 
alter a previously-sent e-mail message; the signal 
causing the computer to implement: 

computer readable code devices configured to 
cause said computer to effect a first reception 
mechanism configured to receive said action 
message; 

computer readable code devices configured to 
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cause said computer to effect a second recep- 
tion mechanism configured to receive said pre- 
viously-sent e-mail message; and 
computer readable code devices configured to 
cause said computer to effect an adjustment 
mechanism configured to alter said previously- 
sent e-mail message as directed by said action 
message. 

10 34. The computer program product of claim 31 , the sig- 
nal of claim 32 or the method of claim 33 wherein 
said action message is a cancel message and 
wherein said adjustment mechanism further com- 
prises computer readable code devices configured 
to cause said computer to effect a deletion mecha- 
nism configured to delete said previously-sent e- 
mail message. 

35. The computer program, signal or method of claim 
34 wherein said previously-sent e-mail message 
further comprises a public key and a unique mes- 
sage identifier; and wherein said cancel message 
further comprises an encrypted unique message 
identifier formed from a private key and said unique 
message identifier; and wherein. said adjustment, 
mechanism further comprises computer readable 
code devices configured to cause said computer to 
effect an authentication mechanism configured to 
authenticate said cancel message. 

36. The computer program product, signal or method 
of claim 35 wherein said adjustment mechanism 
further comprises computer readable code devices 
configured to cause said computer to effect a con- 
firmation mechanism configured to send a confir- 
mation message. 

37. The computer program product of claim 31 , the sig- 
nal of claim 32 or the method of claim 33 wherein 
said action message is a modify message and 
wherein said adjustment mechanism further com- 
prises computer readable code devices configured 
to cause said computer to effect a modification 
mechanism configured to modify said previously- 
sent e-mail message. 

38. The computer program product, signal or method 
of claim 37 wherein said previously-sent e-mail 
message further comprises a public key and a 
unique message identifier, and wherein said modify 
message further comprises an encrypted unique 
message identifier formed from a private key and 
said unique message identifier; and wherein said 
adjustment mechanism further comprises computer 
readable code devices configured to cause said 
computer to effect an authentication mechanism 
configured to authenticate said modify message. 
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39. The computer program product of claim 31 , the sig- 
nal of claim 32 or the method of claim 33 further 
comprising computer readable code devices con- 
figured to cause said computer to effect a duplicate 
message mechanism configured to handle dupli- s 
cates of said action message. 

40. The computer program product of claim 39, the sig- 
nal of claim 32 or the method of claim 33 further 
comprising computer readable code devices con- io 
figured to cause said computer to effect a message 
synchronization mechanism configured to synchro- 
nize actions of a plurality of action messages. 

41. A computer controlled method for altering a previ- is 
ously-sent electronic mail (e-mail) message; said 
previously-sent e-mail message sent by an originat- 
ing e-mail system to a receiving e-mail system; said 
originating e-mail system having a scope of control 
where said receiving e-mail system is beyond said 20 
scope of control; said originating e-mail system 
maintaining information regarding said previously- 
sent e-mail message; said method comprising the 
steps of: 

25 

selecting said previously-sent e-mail message 
by using said information; 
constructing an action message using said in- 
formation; and 

sending said action message to said receiving 30 
e-mail system. 

42. The computer controlled method of claim 41 further 
comprising the steps of: 

35 

receiving said action message; and 
viewing said action message by a recipient. 

43. The computer controlled method ol claim 41 further 
comprising the steps of: receiving said action mes- 40 
sage; 

receiving said previously-sent e-mail message; 
and 

altering said previously-sent e-mail message 45 
as directed by said action message. 

44. A signal according to any one of claims 24 to 30 or 
any one of claims 32 to 40 wherein the signal is re- 
corded to a recording medium. so 

45. A signal according to claim 44, wherein the record- 
ing medium comprises a magnetic disc, a magnetic 
tape, an optical disc or an electronic memory de- 
vice, ss 
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